docu tools GmbH

This guide is intended for administrators and end-users of your company who use the hybrid variant of docu tools, where access to a data storage is via Mutual-TLS (mTLS) and a <code>ca.p7b</code> and a <code>client.p12</code> File are offered for download in the web application dialog window.

You have downloaded the <code>ca.p7b</code> (Certification Authority) and <code>client.p12</code> (Client Certificate with private key) Files from the web application dialog window.

The <code>.p12</code> File is not password protected.

You are using Windows or macOS with one of the following browsers: Microsoft Edge, Google Chrome.

You have sufficient permissions to Import certificates.

- You have downloaded the <code>ca.p7b</code> (Certification Authority) and <code>client.p12</code> (Client Certificate with private key) Files from the web application dialog window.
- The <code>.p12</code> File is not password protected.
- You are using Windows or macOS with one of the following browsers: Microsoft Edge, Google Chrome.
- You have sufficient permissions to Import certificates.

Note: The <code>ca.p7b</code> File contains the certificate of the Certification Authority, the <code>client.p12</code> File the personal client certificate and the key. Both must be installed for the mTLS connection to work.

___________________________________________________________

1. Installation of the Certification Authority Certificate (ca.p7b)

Open the browser → Settings → Privacy and Security → Security → "Manage Certificates".

Switch to "Local Certificates" → "Trusted Certificates" → "Import".

1. Open the browser → Settings → Privacy and Security → Security → "Manage Certificates".
2. Switch to "Local Certificates" → "Trusted Certificates" → "Import".
3. Select the <code>ca.p7b</code> File.
4. Complete the Import.

Double-click on the <code>.p7b</code> File.

Confirm the Import with your macOS Password.

1. Double-click on the <code>.p7b</code> File.
2. Choose "System" or "login" keychain.
3. Confirm the Import with your macOS Password.

2. Installation of the Client Certificate (client.p12)

Switch to "Personal Certificates" → "Import".

Since no Password is required, Click directly on Continue.

1. Open the browser → Settings → Privacy and Security → Security → "Manage Certificates".
2. Switch to "Personal Certificates" → "Import".
3. Select the <code>client.p12</code> File.
4. Since no Password is required, Click directly on Continue.
5. Complete the Import.

Double-click on <code>client.p12</code> File → Keychain Access opens.

No Password needed → Certificate is directly Imported.

Restart the browser → open docu tools → select Certificate.

1. Double-click on <code>client.p12</code> File → Keychain Access opens.
2. Choose keychain "login" or "System".
3. No Password needed → Certificate is directly Imported.
4. Restart the browser → open docu tools → select Certificate.

When accessing, a dialog appears to select the Certificate.

Select your client Certificate → access should be possible.

- Open the web application of docu tools.
- When accessing, a dialog appears to select the Certificate.
- Select your client Certificate → access should be possible.

Certification Authority Certificate not installed?

- Incorrect or expired Certificate?
- Certification Authority Certificate not installed?
- Restart browser?
- Certificate in the wrong location?

Remove the old Certificate from the certificate store.

Install the new <code>client.p12</code> Certificate as described above.

Update the <code>ca.p7b</code> Certification Authority Certificate if necessary.

- Remove the old Certificate from the certificate store.
- Install the new <code>client.p12</code> Certificate as described above.
- Update the <code>ca.p7b</code> Certification Authority Certificate if necessary.

Certificate in the wrong location (e.g., "Other People").

<code>.cer</code> instead of <code>.p12</code> → no private key → does not work.

macOS asks in keychain for "Always Allow" → take note.

- Certificate in the wrong location (e.g., "Other People").
- <code>.cer</code> instead of <code>.p12</code> → no private key → does not work.
- macOS asks in keychain for "Always Allow" → take note.

For further questions, please contact your IT department or the support of docu tools.

Installation of mTLS Certificates for the docu tools Hybrid Solution (on-premise)

Find answers and get help from Intercom Support and Community Experts

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Link, Press control-option-right-arrow to exit

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

Step	Description
1. Install Certificate Chain	Import `ca.p7b`
2. Install Client Certificate	Import `client.p12` File
3. Test Access	Open docu tools → select Certificate

Installation of mTLS Certificates for the docu tools Hybrid Solution (on-premise)

Target Audience

Prerequisites

1. Installation of the Certification Authority Certificate (ca.p7b)

Windows

macOS

2. Installation of the Client Certificate (client.p12)

A) Windows (Edge / Chrome)

B) macOS (Edge / Chrome)

4. Verification and Testing

5. Renewal / Replacement of Certificates

6. Common Sources of Errors

7. Summary